Log in Start free

Nozomi Networks

Products

ProductCVEsExploitedLatest
CMC54–Oct 29, 2026
Guardian53–Oct 29, 2026
Arc8–Sep 8, 2026
Remote Collector1–Jul 9, 2026

Exploited and recent CVEs

  • CVE-2026-33924 High 7.2 Authenticated RCE in update functionality in Guardian/CMC before 26.4.0 1.1%
  • CVE-2026-33924 High 7.2 Authenticated RCE in update functionality in Guardian/CMC before 26.4.0 1.1%
  • CVE-2026-33923 High 7.2 Update bundle signature bypass in Guardian/CMC before 26.4.0 0.2%
  • CVE-2026-33923 High 7.2 Update bundle signature bypass in Guardian/CMC before 26.4.0 0.2%
  • CVE-2026-33920 Low 3.5 Cross-site request forgery in the Guardian/CMC login before 26.3.0 0.1%
  • CVE-2026-33920 Low 3.5 Cross-site request forgery in the Guardian/CMC login before 26.3.0 0.1%
  • CVE-2026-33391 Medium 5.4 Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0 0.4%
  • CVE-2026-33391 Medium 5.4 Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0 0.4%
  • CVE-2026-33389 High 7.5 Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 0.2%
  • CVE-2026-33389 High 7.5 Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 0.2%
  • CVE-2026-33389 High 7.5 Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 0.2%
  • CVE-2026-33388 High 7.4 Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0 0.4%
  • CVE-2026-33388 High 7.4 Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0 0.4%
  • CVE-2026-33387 Medium 4.6 Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0 0.3%
  • CVE-2026-33387 Medium 4.6 Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0 0.3%
  • CVE-2026-33922 Medium 6.0 Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0 0.2%
  • CVE-2026-33921 Medium 5.2 Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0 0.1%
  • CVE-2026-33390 High 8.1 Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 0.4%
  • CVE-2026-33390 High 8.1 Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 0.4%
  • CVE-2026-31985 High 8.1 Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0 0.2%
  • CVE-2026-31984 High 7.5 DoS through oversized audit log entries in Guardian/CMC before 26.2.0 0.5%
  • CVE-2026-31984 High 7.5 DoS through oversized audit log entries in Guardian/CMC before 26.2.0 0.5%
  • CVE-2026-31983 Medium 5.3 Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 0.4%
  • CVE-2026-31983 Medium 5.3 Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 0.4%
  • CVE-2026-31982 High 7.1 Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0 0.3%
  • CVE-2026-31982 High 7.1 Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0 0.3%
  • CVE-2026-31981 Medium 5.9 HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0 0.3%
  • CVE-2026-31981 Medium 5.9 HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0 0.3%
  • CVE-2025-40904 Medium 6.5 HTML injection in Smart Polling in Guardian/CMC before 26.1.0 0.2%
  • CVE-2025-40904 Medium 6.5 HTML injection in Smart Polling in Guardian/CMC before 26.1.0 0.2%